{"id":251395,"date":"2023-09-27T10:43:59","date_gmt":"2023-09-27T14:43:59","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/en\/?p=251395"},"modified":"2025-07-01T18:07:54","modified_gmt":"2025-07-02T01:07:54","slug":"windows-11-users-dont-fall-into-the-fake-password-generator-scam","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/windows-11-users-dont-fall-into-the-fake-password-generator-scam\/","title":{"rendered":"Windows 11 users, don’t fall into the fake password generator scam"},"content":{"rendered":"\n

Proofpoint’s cybersecurity sleuths just unearthed a sly new malware, putting on its best Bitwarden impression to pilfer precious data from unsuspecting users. Big kudos to Malwarebytes’ Senior Director of Threat Intelligence, J\u00e9r\u00f4me Segura, for giving them the heads up.<\/p>\n\n\n\n

This digital menace, now labeled ZenRAT, is basically like that knockoff purse seller in a digital alleyway. Here’s the sneaky part: The culprits snagged the domain “bitwariden[.]com”, a crafty typo that’s eerily close to the real deal. In the tech world, we call this cheeky maneuver typosquatting. And they didn’t stop there. They meticulously crafted a website that’s the spitting image of Bitwarden’s. Tricky, right?<\/p>\n\n\n

\r\n
\r\n
\r\n
\r\n \"Windows\r\n <\/div>\r\n
\r\n Windows 11<\/span>\r\n DOWNLOAD<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n

Windows 11 users, be careful<\/h2>\n\n\n\n

So, how did these digital tricksters spread the word about their deceptive domain? Proofpoint’s brainiacs are betting on tactics like SEO poisoning, malvertising, or the old-fashioned charm of social engineering.<\/p>\n\n\n\n

Here’s the silver lining for Mac and Linux device fans: stroll onto the fake site and hit download, and you’ll be whisked away to a harmless page. But for Windows 11<\/a> users \u2013 it’s a trap! Click that link, and you’re rolling out the welcome mat for ZenRAT.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Once ZenRAT’s made itself at home, it dials up its command & control pals (or C2, if you’re in the know). This malware then goes on a data-hunting spree. Using crafty WMI queries, it’ll snoop around for your CPU name, GPU name, OS version (did we mention Windows 11 users should beware?), RAM stats, IP details, and even that antivirus software you’re running. And, oh boy, if you’ve stored credentials in your browser, ZenRAT’s snatching those too.<\/p>\n\n\n\n

Proofpoint’s sage advice? Stick to trusted digital watering holes when downloading software. Yet, here’s the kicker: even the keen-eyed can be duped. Picture this: a sham Bitwarden ad sneaking onto Google. Given the doppelganger website and the sneaky URL, this scheme can reel in quite the catch.<\/p>\n\n\n\n

As for the damage report? We’re still tallying up how many folks have been bamboozled into downloading this treacherous malware.<\/p>\n","protected":false},"excerpt":{"rendered":"

Proofpoint’s cybersecurity sleuths just unearthed a sly new malware, putting on its best Bitwarden impression to pilfer precious data from unsuspecting users. Big kudos to Malwarebytes’ Senior Director of Threat Intelligence, J\u00e9r\u00f4me Segura, for giving them the heads up. This digital menace, now labeled ZenRAT, is basically like that knockoff purse seller in a digital … Continue reading “Windows 11 users, don’t fall into the fake password generator scam”<\/span><\/a><\/p>\n","protected":false},"author":9290,"featured_media":251396,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":1},"categories":[1015],"tags":[3149],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-251395","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectionwindows-11"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/251395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9290"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=251395"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/251395\/revisions"}],"predecessor-version":[{"id":317643,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/251395\/revisions\/317643"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/251396"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=251395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=251395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=251395"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=251395"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=251395"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=251395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}